Re: Help :(

From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Sat, 8 Sep 2001 20:03:14 -0700
I bet you say that to all the ISA folks...  ;-)

Jim Harrison
MCP(2K), A+, Network+, PCG

  ----- Original Message ----- 
  From: Mark Strangways 
  To: [ISAserver.org Discussion List] 
  Sent: Saturday, September 08, 2001 7:38 PM
  Subject: [isalist] Re: Help :(


  http://www.ISAserver.org


  Thanks Jim,

  As usual you are wealth of knowledge.
  This will make for a project for another day :)

  regards,

  Mark
    ----- Original Message ----- 
    From: Jim Harrison 
    To: [ISAserver.org Discussion List] 
    Sent: Saturday, September 08, 2001 9:41 PM
    Subject: [isalist] Re: Help :(


    http://www.ISAserver.org


    In preference order:
    1. Server publish to an internal server.  As you've noticed, some services 
on the ISA don't play right with server publishing rules (DNS comes to mind).
    2. Server publish on the ISA with the app bound only to the internal IP
    3. Packet filters with the app bound to all NICs

    Jim Harrison
    MCP(2K), A+, Network+, PCG

      ----- Original Message ----- 
      From: Mark Strangways 
      To: [ISAserver.org Discussion List] 
      Sent: Saturday, September 08, 2001 5:03 PM
      Subject: [isalist] Re: Help :(


      http://www.ISAserver.org


      I can bind it to the internal address, but that didn't work for me. But 
then again It might have been my incorrect port selection.
      I will try it again, as I suppose it's better to have only the server pub 
rules with there appropriate protocol definitions.
      What is the most secure way ? Other than not using it to begin with :)

      Thanks,

      Mark
        ----- Original Message ----- 
        From: Jim Harrison 
        To: [ISAserver.org Discussion List] 
        Sent: Saturday, September 08, 2001 7:58 PM
        Subject: [isalist] Re: Help :(


        http://www.ISAserver.org


        Yep; unless you can bind the app to only the internal NIC, in which 
case the packet filters are superfluous and server publishing should be just 
fine.

        Jim Harrison
        MCP(2K), A+, Network+, PCG

          ----- Original Message ----- 
          From: Mark Strangways 
          To: [ISAserver.org Discussion List] 
          Sent: Saturday, September 08, 2001 4:56 PM
          Subject: [isalist] Re: Help :(


          http://www.ISAserver.org


          The app requires 5500,5501,5502,5503 be available .
          I have created 4 Packet filters, and 4 publishing rules, as well as 4 
protocol rules, (inbound).
          I covered all angles, now what should I just need ? The packet 
filters ?

          regards,

          Mark
            ----- Original Message ----- 
            From: Jim Harrison 
            To: [ISAserver.org Discussion List] 
            Sent: Saturday, September 08, 2001 7:44 PM
            Subject: [isalist] Re: Help :(


            http://www.ISAserver.org


            1. Check your IPEXT...log for refusals; "Blocked"
            2. Check your FWEXT...log for acceptance. "Accept" is inbound, 
"Connect" is outbound.

            Are you sure the app doesn't need secondary connections?  Those 
aren't available in Packet Filters.

            Jim Harrison
            MCP(2K), A+, Network+, PCG

              ----- Original Message ----- 
              From: Mark Strangways 
              To: [ISAserver.org Discussion List] 
              Sent: Saturday, September 08, 2001 1:14 PM
              Subject: [isalist] Help :(


              http://www.ISAserver.org


              Hi all,

              I'm trying to publish a server on my isa box at port 5500... but 
I cannot get it to work.
              I have the server publishing rule in place, and have made packet 
filters.
              But the app doesn't connect and respond to clients, and at this 
point I don't know if ISA is accepting the remote client.

              Any suggestions ?

              Thanks,

              Mark
              ------------------------------------------------------
              You are currently subscribed to this ISAserver.org Discussion 
List as: jim@xxxxxxxxxxxx
              To unsubscribe send a blank email to $subst('Email.Unsub') 
            ------------------------------------------------------
            You are currently subscribed to this ISAserver.org Discussion List 
as: strangconst@xxxxxxxx
            To unsubscribe send a blank email to $subst('Email.Unsub') 
          ------------------------------------------------------
          You are currently subscribed to this ISAserver.org Discussion List 
as: jim@xxxxxxxxxxxx
          To unsubscribe send a blank email to $subst('Email.Unsub') 
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
strangconst@xxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 
      ------------------------------------------------------
      You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
      To unsubscribe send a blank email to $subst('Email.Unsub') 
    ------------------------------------------------------
    You are currently subscribed to this ISAserver.org Discussion List as: 
strangconst@xxxxxxxx
    To unsubscribe send a blank email to $subst('Email.Unsub') 
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub')
Re: Help :(

Other related posts:
